-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 07 Feb 2019 17:57:04 +0100
Source: dovecot
Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd
dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap
dovecot-gssapi dovecot-sieve dovecot-solr dovecot-lucene dovecot-dbg
Architecture: source amd64
Version: 1:2.2.13-12~deb8u5
Distribution: jessie-security
Urgency: high
Maintainer: Dovecot Maintainers <jaldhar-dove...@debian.org>
Changed-By: Chris Lamb <la...@debian.org>
Description:
dovecot-core - secure POP3/IMAP server - core files
dovecot-dbg - secure POP3/IMAP server - debug symbols
dovecot-dev - secure POP3/IMAP server - header files
dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
dovecot-imapd - secure POP3/IMAP server - IMAP daemon
dovecot-ldap - secure POP3/IMAP server - LDAP support
dovecot-lmtpd - secure POP3/IMAP server - LMTP server
dovecot-lucene - secure POP3/IMAP server - Lucene support
dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
dovecot-mysql - secure POP3/IMAP server - MySQL support
dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
dovecot-sieve - secure POP3/IMAP server - Sieve filters support
dovecot-solr - secure POP3/IMAP server - Solr support
dovecot-sqlite - secure POP3/IMAP server - SQLite support
Changes:
dovecot (1:2.2.13-12~deb8u5) jessie-security; urgency=high
.
* CVE-2019-3814: Fix a vulnerability in the TLS username handling where an
attacker could login as anyone else in the system if
auth_ssl_{require_client_cert,username_from_cert} was enabled.
Checksums-Sha1:
d2c220e975092a12246001dd886a673e496612f7 3335 dovecot_2.2.13-12~deb8u5.dsc
ee8efc77cb9d502dc416ae4fba242adc5f01c163 4613824 dovecot_2.2.13.orig.tar.gz
4abaf442e1eb40db5372654b8cbefc00b440b2b1 746672
dovecot_2.2.13-12~deb8u5.debian.tar.xz
d5ae56c34f7b83d40b41aa1b1f64674c9e7d05d0 2664922
dovecot-core_2.2.13-12~deb8u5_amd64.deb
b4272a28e034a67dba82876b9df9d79a17f00fc7 751444
dovecot-dev_2.2.13-12~deb8u5_amd64.deb
b2e2997e517e9b948d66c058cdaa5b72f28d89ff 647588
dovecot-imapd_2.2.13-12~deb8u5_amd64.deb
1fc5806ba92794181a95efee11434b42bf7eb0b7 550988
dovecot-pop3d_2.2.13-12~deb8u5_amd64.deb
aaeef90ebacb0406c39c02b0c68cab96fb80ff87 542830
dovecot-lmtpd_2.2.13-12~deb8u5_amd64.deb
b3e2cd5971f939dc946201d074d2d0db41e24cf2 569698
dovecot-managesieved_2.2.13-12~deb8u5_amd64.deb
2a8cab323c1bb7f4cb1d3f63443fac49c38be29f 534202
dovecot-pgsql_2.2.13-12~deb8u5_amd64.deb
58f0446142f5f64764d4b608de54f79376bc8998 531856
dovecot-mysql_2.2.13-12~deb8u5_amd64.deb
5ce714d7150f6747dab255bdf80ab41efd5b18e4 530056
dovecot-sqlite_2.2.13-12~deb8u5_amd64.deb
1f02c2447700545069be273538114886d7bf5fce 545300
dovecot-ldap_2.2.13-12~deb8u5_amd64.deb
db2b960d1eb0af3ef855abd7245aa7b7f8aa72ea 531248
dovecot-gssapi_2.2.13-12~deb8u5_amd64.deb
3b952640d4f95dbdf7126c62ff44b41fa716de91 767064
dovecot-sieve_2.2.13-12~deb8u5_amd64.deb
c75c636f8b9d99dcb44ef7b8769df2b62d452cf0 542172
dovecot-solr_2.2.13-12~deb8u5_amd64.deb
eee5ea4703c98359444c07b8c4d3c4d8b1713efc 549238
dovecot-lucene_2.2.13-12~deb8u5_amd64.deb
4d585d950603b29aa27e97235a34f2908c8d682a 6780626
dovecot-dbg_2.2.13-12~deb8u5_amd64.deb
Checksums-Sha256:
52e3746b91d8e6eb91f77b7359fbaf2d92fe845cca814a11e1953362d98a12f7 3335
dovecot_2.2.13-12~deb8u5.dsc
133cf3d2aa81733f6688ec986c91dbe07602fad81e856ba3d8046ffca85d9dce 4613824
dovecot_2.2.13.orig.tar.gz
eb9462d95896d0c6de5b2aa0f3f7c3a8eaadb13610cc32ab1f34017e795ca314 746672
dovecot_2.2.13-12~deb8u5.debian.tar.xz
d643ae2d3181b7c0e951fa7a8e030524a15533f4ac0f9c1d655b5023ea963b47 2664922
dovecot-core_2.2.13-12~deb8u5_amd64.deb
d789c90d0a3aadb91a2819abddb2108bcf3d4b396e33a0404f568ded2eb559f5 751444
dovecot-dev_2.2.13-12~deb8u5_amd64.deb
b562ba8b2087b8c87fe38d5325d058bac74101a7510f3cfb659e44a79a2cbc3b 647588
dovecot-imapd_2.2.13-12~deb8u5_amd64.deb
dadfbed30c131b787425e9ec9afe40cd63b5a1da531aee3b29330229d8c7b70a 550988
dovecot-pop3d_2.2.13-12~deb8u5_amd64.deb
7d0288f428beba5ec8b2eb62df7a0d1c48c90cfa7dfc6ebfa9df9dbde7ba1974 542830
dovecot-lmtpd_2.2.13-12~deb8u5_amd64.deb
5cf4a4e9e4497f4d86764113f89f859f74b1250d8c3472c9588461a8a1aaff6f 569698
dovecot-managesieved_2.2.13-12~deb8u5_amd64.deb
ded2d2c756b96309912421f52365398dd69ae33b70ca653a60d7c0404bbe0185 534202
dovecot-pgsql_2.2.13-12~deb8u5_amd64.deb
a4b48f53f441b9c3d7c22d4f56d929c4ac94e764049d104c297f9f47d6d13512 531856
dovecot-mysql_2.2.13-12~deb8u5_amd64.deb
a494a9d04d585b4507c1c652f0980896d4d04a70b2a4a48c883a637a355203ba 530056
dovecot-sqlite_2.2.13-12~deb8u5_amd64.deb
c35fa97d4974e500bed27488c4913d49bc0ab22df6fe023030312dd79ba6e894 545300
dovecot-ldap_2.2.13-12~deb8u5_amd64.deb
92ce9961623560a8e1aaa23fcb449194984470f5d70ef37dbd5162b910bbb58d 531248
dovecot-gssapi_2.2.13-12~deb8u5_amd64.deb
eb14eb52569b89e318b49feb9796c133586872976dad934d4792a5129a868191 767064
dovecot-sieve_2.2.13-12~deb8u5_amd64.deb
039c7e09038e6862ecaf2972b0f5b4643abe000d4f02acc4338928348ea5b2cc 542172
dovecot-solr_2.2.13-12~deb8u5_amd64.deb
e90603eac81e75f31972d9b3f8ef144b57c4112fc799a56fd98ad0fed89c1cd2 549238
dovecot-lucene_2.2.13-12~deb8u5_amd64.deb
f92c8f619eb576c7e723249e01b30a800d2a03caf7c7167147058cd3f7e7eb38 6780626
dovecot-dbg_2.2.13-12~deb8u5_amd64.deb
Files:
6e7fd36aca84b664ffd9c520d99efeae 3335 mail optional
dovecot_2.2.13-12~deb8u5.dsc
a3eb1c0b1822c4f2b0fe9247776baa71 4613824 mail optional
dovecot_2.2.13.orig.tar.gz
28c585ed9b26d8ad5d69000a0ba0bfd0 746672 mail optional
dovecot_2.2.13-12~deb8u5.debian.tar.xz
c4b55e946c8875144cacdbffe250b7c1 2664922 mail optional
dovecot-core_2.2.13-12~deb8u5_amd64.deb
0ed94cc753881565a2891edf4424d7c6 751444 mail optional
dovecot-dev_2.2.13-12~deb8u5_amd64.deb
7f612ee279a7d65e9211d91da7b2ffc0 647588 mail optional
dovecot-imapd_2.2.13-12~deb8u5_amd64.deb
ff2db3414f07c9d1956ae47fe08f445a 550988 mail optional
dovecot-pop3d_2.2.13-12~deb8u5_amd64.deb
5f98a94f0a73d94549e9cae40942d5db 542830 mail optional
dovecot-lmtpd_2.2.13-12~deb8u5_amd64.deb
c00d47ed01189e5d0dc5b21150175592 569698 mail optional
dovecot-managesieved_2.2.13-12~deb8u5_amd64.deb
d735fe01b60a39bacb6e600020fe1018 534202 mail optional
dovecot-pgsql_2.2.13-12~deb8u5_amd64.deb
076ff856e35b9fd617f5ebaeed11e419 531856 mail optional
dovecot-mysql_2.2.13-12~deb8u5_amd64.deb
843827ec7f3f0293c21d20547ae57a1f 530056 mail optional
dovecot-sqlite_2.2.13-12~deb8u5_amd64.deb
e22eae6133ad67165c773c98de9219ef 545300 mail optional
dovecot-ldap_2.2.13-12~deb8u5_amd64.deb
f3559f9ef9a4b3b75a8d32b23cc3098e 531248 mail optional
dovecot-gssapi_2.2.13-12~deb8u5_amd64.deb
0fe972c75c54e79cfff0364a2ff9afad 767064 mail optional
dovecot-sieve_2.2.13-12~deb8u5_amd64.deb
7e99b61390e349eecab2ac1c6521d7cc 542172 mail optional
dovecot-solr_2.2.13-12~deb8u5_amd64.deb
81abc9f517669b4e821b4177c3d35769 549238 mail optional
dovecot-lucene_2.2.13-12~deb8u5_amd64.deb
7f5cd6f7b2030b683354a519438cf931 6780626 debug extra
dovecot-dbg_2.2.13-12~deb8u5_amd64.deb
-----BEGIN PGP SIGNATURE-----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=p5t+
-----END PGP SIGNATURE-----
